@everystack/server 0.4.36 → 0.4.37

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `@everystack/server` are documented here.
 
 Format based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [0.4.37] - 2026-10-18
+
+### Fixed
+
+- an action named __proto__ in a plugin or app action map is refused at init
+
 ## [0.4.36] - 2026-10-18
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everystack/server",
-  "version": "0.4.36",
+  "version": "0.4.37",
   "description": "Server runtime primitives for Lambda — event adapters, routing, SSR, image processing",
   "license": "AGPL-3.0-only",
   "author": "Scalable Technology, Inc. <licensing@scalable.technology>",
@@ -192,8 +192,8 @@
     "sst": "4.13.1",
     "ts-jest": "29.4.9",
     "typescript": "5.9.3",
-    "@everystack/cli": "0.4.100",
-    "@everystack/auth": "0.4.9"
+    "@everystack/auth": "0.4.9",
+    "@everystack/cli": "0.4.100"
   },
   "scripts": {
     "test": "jest",

package/src/plugin.ts

@@ -172,6 +172,17 @@ export function createPluginLambdaHandler(
       contributions.push(await plugin(ctx));
     }
 
+    // An OWN `__proto__` key (parsed JSON, a computed key) cannot be an action: Object.assign would
+    // run the `__proto__` setter on the map instead of adding it, and the spread below would define
+    // it as an own key. Refuse it at init rather than drop or dispatch it.
+    const refuseProtoKey = (source: string, actions: Record<string, ActionHandler> | undefined) => {
+      if (actions && Object.hasOwn(actions, '__proto__')) {
+        throw new Error(`[everystack/server] ${source} action name "__proto__" is not allowed`);
+      }
+    };
+    for (const contribution of contributions) refuseProtoKey('plugin', contribution.actions);
+    refuseProtoKey('app', options.actions);
+
     // Collect actions (app-level takes precedence on collision)
     const pluginActions: Record<string, ActionHandler> = {};
     for (const contribution of contributions) {